CVE Catalog

CVE-2023-53774

Critical
Published: Translated: NVD NIST

Summary

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.

Risk Assessment

An attacker can remotely take control of the TV system, potentially leading to integrity and availability breaches.

Recommendation

Restrict access to the SVDRP protocol and update the system to the latest version if available.

Original NVD description (English source)

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS